sanjuanpaiute-nsn.gov

Issued by R3

About this certificate

This digital certificate with serial number 03:88:04:06:86:6d:05:22:33:26:8c:ab:0f:f1:47:d7:23:da was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sanjuanpaiute-nsn.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:04:06:86:6d:05:22:33:26:8c:ab:0f:f1:47:d7:23:da
Serial Number (int): 307620610488773007216805457872969249792986
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:7a:94:9a:48:ce:16:8f:14:50:4f:50:80:fe:8b:b4:7b:96:a2:d6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:c2:d0:22:67:b5:21:25:f9:c5:bf:6f:fe:93:b1:6a:35:de:eb:0a
Fingerprint (sha256): 46:49:a3:1b:e0:db:96:c0:59:83:47:9f:90:01:57:c3:9f:a8:f9:28:7e:61:ca:0f:b5:31:eb:1a:23:af:8a:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sanjuanpaiute-nsn.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanjuanpaiute-nsn.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanjuanpaiute-nsn.gov

Other certificates including the domain name sanjuanpaiute-nsn.gov

(limited to 100 certificates)
www.oyp.cloud
www.sanjuanpaiute-nsn.gov
hr.dabhisho.org.za
helpdesk.pnaresort.com
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
support.simpleintranet.org
tempus.minuvol.net
team.rumzer.com
events.idayit.com
connect.macleodmarketinggroup.com
events.waterfordtechnologies.com
people.fpsllc.net
people.tesena.com
tempus.minuvol.net
events.advisorcorp.com.au
events.advisorcorp.com.au
tempus.minuvol.net
events.advisorcorp.com.au
scis.gtechnologies.in
tempus.minuvol.net
referralportal.smeyegroup.com
tempus.minuvol.net
support.cloudworkmates.com
connect.desotollc.com
events.advisorcorp.com.au
support.tailoredindustry.com
tempus.minuvol.net
events.advisorcorp.com.au
tempus.minuvol.net
support.richkart.com
events.amigoz.pro
tempus.minuvol.net
connect.macleodmarketinggroup.com
tempus.minuvol.net
connect.macleodmarketinggroup.com
people.fpsllc.net
www.sanjuanpaiute-nsn.gov
tempus.minuvol.net
events.globalangels.org
connect.macleodmarketinggroup.com
connect.snaplitics.com
people.fpsllc.net
people.fpsllc.net
people.fpsllc.net
connect.macleodmarketinggroup.com
tempus.minuvol.net
events.advisorcorp.com.au
people.fpsllc.net
hr.myhotels.sa
support.simpleintranet.org
demo.traceit.live
events.advisorcorp.com.au
tempus.minuvol.net
tempus.minuvol.net
people.fpsllc.net
tempus.minuvol.net
people.fpsllc.net
connect.macleodmarketinggroup.com
www.oyp.cloud
connect.macleodmarketinggroup.com
events.inceptlabs.com.au
connect.macleodmarketinggroup.com
members.sanjuanpaiute-nsn.gov
events.timberagesystems.com
people.rakshapm.com
connect.macleodmarketinggroup.com
events.advisorcorp.com.au
edgetechsupport.eagledownhole.com
connect.todaycfo.com
connect.macleodmarketinggroup.com
www.gabcon2019.com
events.1cloudconsultants.com
tempus.minuvol.net
connect.agilean.ca
events.inceptlabs.com.au
connect.agilean.ca
tempus.minuvol.net
events.1cloudconsultants.com
support.precisionextraction.com
sanjuanpaiute-nsn.gov
people.fpsllc.net
events.1cloudconsultants.com
tempus.minuvol.net
www.sanjuanpaiute-nsn.gov
people.fpsllc.net
tempus.minuvol.net
connect.macleodmarketinggroup.com
people.fpsllc.net
sanjuanpaiute-nsn.gov
tempus.minuvol.net
sanjuanpaiute-nsn.gov
tempus.minuvol.net
events.tech2.dk
connect.macleodmarketinggroup.com
tempus.minuvol.net
connect.macleodmarketinggroup.com
tempus.minuvol.net
www.theixevent.com

Certificate

The complete raw certificate details for sanjuanpaiute-nsn.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36DSsCy/SDFJJXrtfBtP
Wzkotx5xBfBb8xkV9VD3mUd1h4Ybpr1vYBXibHapQEJqSroAFmo2sOLhoeRPY/LQ
SPCuNLpGTU+ZdnpIn1524b81n8uR/cwa8SGPLphlmibv7oM35hlucYESWfcEawff
TcKQFcYzJWdKP3dp9+dKQKfnUKqTEyr2Igex260CObiZpy1SOa81BrB3GRqaJn6p
dQ/6ByKcX6tORbik33AF5sMtvLiUHYHshKVKoAms/q59RHxoFURCViTO0q28nUF+
obFZKAiz3J9EEop72NIAzQbvNKvw18liKceBEUhsmRFpUhHkMGQ1GPl84XG5SAKt
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307620610488773007216805457872969249792986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 15:11:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 15:11:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanjuanpaiute-nsn.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28230446784812684387713021174130834838814919447212560557276894532797395534667238849492863133039473732000217053608771119376909301500576948478479607029160584571325644922680141504589942652586544835325761952532752389544642879616660849285400770312102143747809884538638542543338704179406111887794547600622394251477094412431986046180629424880444761918242303651420170686293915682931015502681388838673989340766400018147142064039869340064708669223810884691169602243048354511517324028186817051053330791152966873681635092344632644823814642653759564707861807974307873839679644202286178100180141828003993091302750852287921599458777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c17a949a48ce168f14504f5080fe8bb47b96a2d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuanpaiute-nsn.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e2e4844d20000040300473045022100a076562f586f7554f6101dcd640dde63128dbf56bfd4872b19b18931b02fab49022017cd4dd9f964bfd258cf844e69aadc80c1e6a1319b38cb2e0d50df2573eff58d007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e2e4844b40000040300483046022100d5f9923cae316ad25136012c91d99875256a6688192753042e2ff1ea73cb34f1022100a25a7dd3393b42f1f259ab3ed7a069c46217bc11defcae8db06d5e5cb0d4c27a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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